claimpaign-com[.]pages[.]dev

The domain claimpaign-com.pages.dev is active and currently hosts a fake airdrop scam targeting Cardano enthusiasts. The site presents itself as a "Cardano Airdrop Tool," enticing users to distribute tokens via QR codes. Despite its malicious intent, it remains undetected by major antivirus vendors, with 0 out of 91 detections on VirusTotal. This highlights the freshness of the threat, as it exploits the typical 24-72 hour gap between domain registration and antivirus database updates.

Registered and hosted by Cloudflare, Inc., the domain uses Let's Encrypt for SSL certification. It operates on the IP address 188.114.96.3, located in the United States. The domain's early detection by PhishDestroy, which flagged it on June 21, 2026, underscores its potential danger during the pre-propagation window. Currently, it appears on one public blocklist, specifically PhishDestroy's, indicating its recognition as a threat within specialized security circles.

The platform risk score for this domain is 68 out of 100, suggesting a significant level of threat. The scam aims to deceive users into believing they are participating in a legitimate Cardano token distribution, potentially leading to financial loss or data compromise. This operation is a classic example of how threat actors leverage popular cryptocurrency brands to lure unsuspecting victims. By understanding the tactics used, individuals and organizations can better protect themselves from similar scams.